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RKIVTARKS 

Claiius 9-17, 22-29, 38-46, 51-58, 60, 62 and 63 arc pcnduigin the present appliealion. 
Reconsideration of the claims is respectfully requested. 

1, Claim Status Clarificntion 

According to Applicants records. Claims 9-17, 22-29, 38-46, 5 1-58, 60, 62 and 63 
£irc pending in the present application. Claims 1-62 were rejected in an Office Action 
dated November 6, 2002. In response thereto. Applicants amended Claims 9, 38 and 60; 
cancelled Claims 1-8, 18-21, 30-37, 47-50, 59 and 61; and added Claim 63. This is in 
contrast to Uie Examiner's claim status, which indicates that Claim 61 is still pending, 
and that Claim 62 was newly added. 

TL 35 U.S.C, § 102. Anticipation 

The Examiner rejected Claims 22-29 and 51-58 under 35 U.S.C, § 102 as being 
anticipated by Dustaii ct al. This rejection is respectfully traversed 

Regarding Claims 20, 25, 26, 28, 51, 54, 57 and 62, the Examiner states that 
Duslan el al figures 5 and 6 leach a system and mclhod for securely accessing 
information from data sources through a network such that Applicants' step of sending a 
first request reads on the menu selection at step 218, Applicants' credential reads on the 
account number and password at step 176, Applicants' session identification reads on 
step 21 6, and Applicants' second request reads on step 234. As to this assertion. 
Applicants respond as follows. 

Claim 20 was previously cancelled, so Applicants deem the assertion regarding 
Claim 20 to be moot. 

Applicants assume that Claim 62 was meant to be included in the list of claims in 
paragraph 3 where the claims subject to the 102(b) rejection wci-e listed. If this 
assumption is incon ect, further clarification is requested. 

As to the assertion that Applicants* step of sending a first request reads on the 
menu selection at step 218, further cltirification is rcquestetl as Applicants do not see a 
claimed slop of scndhig a first request in any of those rejected claims. 
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As lo the assertion thai Applicanlij* second request reads on step 234, further 
clarincation is requested as ApplicsiTils do not see a claimed second request in any of 
those rejected chiinis. 

Regarding Claim 22 (and dependent claims (hereof), Applicants show that the 
cited rcrcrcncc docs nol toach the claimed steps of* Yelricving u session data structure 
inckiding a second credcnlial in response to ihe session identification being valid" or 
"determining whether the fir^t credential and the se+;ond credential match". Nor has the 
Examiner alleged ssuch a teaching. In rejecting Claim 22, the Examiner merely stales that 
"Diistan et al teach that the session id is also verified, column 9, lines 27-30", Applicants 
show tliat in addition to claiming "determining whe ther the session identification is 
valid". Claim 22 also recites 'Veti loving a session d^la structure including a second 
credential in response to the session identincationhcing valid;" and "determining 
whether the first credential and Ihc second credential I match". The cited reference does 
not leach, nor has the Extunincr alleged a teaching of, these claimed steps and hence it is 
shown that Claim 22 has been erroneously rejected under 35 U.S.C, 102(b), For a prior 
art reference to anticipate in terms of 35 U.S.C. 102, every element of the claimed 
invention must be identically shown in a single reluencc. In re Bond, 91 0 F,2d 831, 15 
USPQ2d 1566 (I'cd. Cir, 1 990). Since every element ofthe claimed invention is nol 
identically shown in the cited reference, this rcrercticc docs not anticipate the claimed 
invention, 

These missing claimed elements, in combination witli the remaining elements of 
Claim 22, udvaTitagcously improve security in a data processing system by use of a 
second credential associated with the session data, whereby not only must the received 
session idcntincation be valid, but in addition a received first credential must match this 
second credential associated with the session data. The cited prior art does not provide 
this type of functionality. 

Applicants traverse the rejccdon of Claim 5 1 (and dependent claims thereof) and 
62 Tor similar reasons to those given above regarding Claim 22. 

Therefore, the rejection ofClaims 22-29, 51-58 and 62 under 35 U.S-C, § 102 has 
been overcome. 
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III. 35 ILS.C. S 103. Obviousness 

A, The lixamincr rejected Claims 9-17, 38-46, 60 and 63 under 35 U.S.C, § 103 as 
being unpatentable over Dustin ct al in view of Shi ct ^l This rejection is respectfully 
traversed. 

With respect to Claim 9 {<mA dependent claims thereof), none of the cited 
rcfcicnccs leach or suggest the claimed feature of "determining whether the credential is 
valid for both the client and the session data" (emplntsis added). Nor has the Examiner 
nllogcd any such teaching or suggestion. Therefore, the Examiner ha^ failed to establish 
a prima facie ssliowing of obviousness. To establish prima facie obviousness of a claimed 
invention, all of the claim limitations must be taught or suggested by the prior art. 
(emphasis added) MPEP 2143.03. Sea also. In re Rovka . 490 R2d 580 (CC.RA. 1974), 
In rejecting claims under 35 U.S.C^ Section 103, \ho examiner bears the initial burden of 
piesenting a prima facie case of obviousness. Jn re Oetiker, 977 F.2d 1443, 1445, 24 
LJSPQ2d 1 443, 1444 (Fed. Cir. 1 992)* Only if that burden is met, does the burden of 
coniing forward with evidence or argument shifl to the applicant. Td. Tf the examiner 
rails to establish a prima facie case, the rejection is improper and will be overtunicd. In 
te Fine, 837 R2d 1071, 1074, 5 USPQ2d 1596, 1508 (Fed, Cir. 1988). 

As a prima facie case of obviousness has not been made with respect to Claim 9 
(and dependent claims thereof), the burden ha<5 not shifted to Applicants to rebut an 
assertion of obviousness. Hence, the rejection of Claim 9 (and dependent claims thereof) 
has been successfully traversed^ 

Applicants traverse the rejection of Claim 38 (and dependent claims thereof). 
Claim CO (and dependent clain\s thereof) and Claim 63 for similar reasons lo those given 
above regarding Claim 9. 

B. The Fxaniiucr rejected Claims 6, 1 5, 27, 35, 44 and 56 under 35 U.S.C. § 103 as 
being unpatentable over Dustin ct al in view of Ueyeh et al. Tliis rejection is respectfully 
traversed. 

With rcsi^cct to Claims 6 tuid 35, Applicants show that such claims have 
previously been cancelled and hence the rejection of these claims is shown to be moot. 
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Willi respect; to Claims 15, 27, 44 and 56, Applicants traverse for reasons given 
above rcgaaliug ijidcpcndenl Claims 9, 22» 38 and 5 1 , of which these claims ultimately 
depend upon, rcspcclively. 

C. Thcrelbrc. the rejection of Claims 9-17, 27, 38-46, 56, 60 and 63 under 35 U.S.C. 
§ 103 1ms been overcome. 

IV. Paragraph 18 Comments bv Examiner 

Tn paragraph 1 8 oflhc present office action, the Kxaminer notes that Applicants 
appear to be making inconsistent arguments in thai in one instance Applicants argue that 
Dvistan fails to teach detennining whether the first credential and the second credential 
match, but yet in another argument state that Dustan teaches a determination of whether 
the first credential matches a session data structure ^^redentiaL In order to set the record 
straight. Applicants note that there was a tyiiogi-aplucal eiTor in one sentence of their 
previous response. On page 10 of Ihc response, in ihc discussion regarding Claim 22, the 
sentence reading: 

^'Subsequent requests check the supplied scission ID (Dustan Figure 6, 
block 238), but do determine whether a first credential matches a session 
data structure credential." 

inadvertently left out the word "not", and the sentence was intended to state the 
following: 

"Subsequent requests check the supphed session ID (Dustan Figure 6, 
block 238), but do not determine whether n firyt credential matches a 
session data structure credential." (emphasis added) 

Use oflhc word *Tjut" immediately prior to the word "do" confinns this intention, as the 
word "buf ^ is used to counter or contrast what was just stated. Jf the word "not'* was not 
intended to be included, the sentence would have used the word "and" instead of "but" to 
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show lhal the two phrases convey similar thoughts, histcad, use of Uie word ''but" sliows 
an intention to contrast the lirst phnise with the second phrase, in that a check is made for 
one (cliecking session TD) but not for the other (whether first credential matches a sessioJi 
data stmcUirc credential). In any event, it is Applic;tnts' position that the cited reference 
docs NOT teach a determination that the first crcdciitial matches a session data structure 
credential. 

V. Conclusion 

It is respectfully urge^l that the subject application is patentable over the cited 
references and is now in condition for allowance. 

The Examiner is invited to call the undersigned at tlic below-listcd telephone 
number if in the opinion of the lixaminer such a telephone conference would expedite or 
aid the prosecution and examination of this application. 



DATE: j bJ> 



Rcspo^rtfuUy submitted, 




DukcW.Yee < 
Reg. No. 34,285 



Wayne P. IJailey 
Reg. No. 34,289 



Carstcns, Ycc & Gaboon, LLP 



P.O. Box 802334 
Dales', TX 75380 
(972) 367-2001 



Attorneys for Applicants 
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